Skip to content
OpenAdvisories
Unscored CVE-2021-25093 EUVD-2021-12005GHSA-4j83-364h-wcgq

Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion

Published Feb 1, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request

Affected products

VendorProductAffectedFixed
— Link Library 7.2.8 – < 7.2.8 7.2.8

References